Skip to content
Security and AI transparency

How Lawfly handles your data and uses AI.

This page sets out what we do with case data and how AI features work, in plain language. Statements here are kept short and factual. Sections not yet published are marked.

NoteSections marked "To be published" are completed before launch. This page describes the India beta as used by advocates today.
01 · AI use and its limits

What the AI does, and what it does not

Lawfly uses AI to summarise research questions and to help start drafts from case context. AI-generated text can be wrong or incomplete, including citations. It is labelled inside the product and is meant to be checked by an advocate before it is relied on. Lawfly does not provide legal advice.

To be published: AI vendors or models used; whether prompts and outputs are stored and for how long; whether customer data is used to train any model.
02 · Source references

Research answers show their sources

Research summaries include references to the material they draw on so that you can open and read each source. A reference is a pointer for your own verification, not a guarantee that the summary is correct.

To be published: which source collections are covered and how they are kept current.
03 · Human review

The advocate stays in control

Lawfly does not file documents with any court. Drafts remain editable until you export them, and you decide what is shared with clients.

04 · Data handling

Where case data lives and how it is protected

Where India beta case data is hosted, how it is encrypted and backed up, and which providers process it have not yet been published on this page. Until they are, this page makes no hosting, encryption or certification claim.

To be published: hosting provider and region; encryption in transit and at rest; backup practice.
05 · Access

Who can see your cases

Case data is visible to you and to colleagues you invite to a case or firm workspace.

To be published: staff access policy; authentication options; audit logging.
06 · Retention and deletion

How long data is kept, and how to remove it

To be published: retention periods; export options; deletion on request and on account closure.
07 · Subprocessors

Third parties that process data for Lawfly

To be published: list of providers and the purpose of each.
08 · Reporting a concern

How to reach us about security or AI behaviour

If you believe you have found a security issue, or an AI output that should be reviewed, write to us through the contact page.

To be published: a dedicated security contact address and response commitment.
Ask LawflyAutomated assistant · scripted replies

Your details are used only to contact you about Lawfly. No spam.